VULNERABILITY INTELLIGENCE

CVE-2025-66169

CVSS score5.3 MEDIUM

EPSS probability0.64%

CISA KEVNot currently listed

Published2026-01-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references

security@apache.org — Issue Tracking, Mailing List, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory